Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
File:                     PxP6dbPOiUzEZAQaipX4WffBxNI.mft (raw, json)
Hash identifier:          3Ry4E/ooViTwSdSM8CjSRk99HxhVMklJ0HdSvwdlumY=
Subject key identifier:   36:C8:7C:15:8C:45:BD:24:26:50:D7:4E:8E:62:12:5F:B9:6D:E2:55
Authority key identifier: 3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
Certificate issuer:       /CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Certificate serial:       01962F74DCCA60C675B6D4AFB4E0B056BC86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
Manifest number:          6F
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: PxP6dbPOiUzEZAQaipX4WffBxNI.crl (hash: DCJWUURSH7DKVjhV94nLbo9U9IAVGiHrKtV7EF0j+HI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dc:ca:60:c6:75:b6:d4:af:b4:e0:b0:56:bc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=36c87c158c45bd242650d74e8e62125fb96de255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:bf:4f:8c:76:f9:35:70:7e:65:09:69:f5:
                    79:38:23:e0:52:f1:29:a1:ae:fd:9f:e9:f3:90:f7:
                    c2:86:d6:86:12:18:d0:c7:46:c2:05:64:a5:54:a9:
                    c3:58:56:ca:7f:7d:34:3b:ec:7d:fd:b9:b0:94:47:
                    a8:ed:61:54:92:4d:f7:0b:12:7a:0b:18:43:db:87:
                    e1:0e:1e:39:60:4a:70:08:a8:48:78:c7:e8:31:d0:
                    63:e9:33:08:1f:eb:17:28:6e:bd:4c:4b:ac:d9:27:
                    e6:93:72:20:0e:b5:40:da:ed:2f:f3:d0:85:d1:66:
                    57:54:73:f0:12:f1:cf:62:87:6d:60:94:3c:db:80:
                    7b:de:74:0b:fc:a0:92:07:0b:18:23:9b:68:14:e3:
                    53:43:fb:47:5e:f9:0e:66:39:b8:b3:62:3a:0e:d6:
                    5f:e6:b9:df:32:55:b3:fd:75:23:3c:45:80:b0:3b:
                    d6:fd:8e:50:d4:d4:0f:bc:36:9a:c5:87:5f:6e:f2:
                    9d:07:82:7b:22:b5:74:0c:77:8b:b3:4c:40:f1:83:
                    14:a0:72:71:d7:59:1b:2c:90:da:43:16:e0:c3:73:
                    8e:e9:de:3f:6a:87:5f:b7:6f:0b:18:e6:41:c4:64:
                    2f:93:b3:32:c0:77:ff:35:c3:cc:61:bb:3a:15:10:
                    4a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C8:7C:15:8C:45:BD:24:26:50:D7:4E:8E:62:12:5F:B9:6D:E2:55
            X509v3 Authority Key Identifier:
                keyid:3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:99:8d:71:e9:5c:f3:d8:da:9d:c9:7a:6f:e7:f4:2f:9f:c0:
         2d:db:19:f4:0f:a6:d2:ee:9d:e8:10:65:85:99:b5:c6:f6:ef:
         53:56:6b:f6:46:2a:24:c0:87:de:60:af:8f:07:34:ab:12:62:
         68:65:be:e3:a6:d6:5c:3c:35:3f:14:48:f8:4c:4e:f2:b5:f8:
         e0:7e:a1:de:b1:44:e8:69:18:d3:4e:a4:5d:65:4f:75:0d:99:
         fb:19:98:b6:80:cc:1e:b0:23:ee:70:99:c8:d5:71:2b:25:c4:
         d3:ca:11:25:cf:a3:8f:d4:f5:b4:44:ba:05:8a:7e:4d:10:d0:
         1e:6a:2d:10:a3:b8:83:a6:a6:19:67:26:1e:18:97:11:89:5e:
         ec:1c:c3:20:75:38:43:34:de:cb:52:11:34:15:ae:be:2f:40:
         09:79:56:5e:55:db:de:24:89:37:89:51:ad:2b:a5:75:af:c4:
         9e:a7:2a:01:0c:82:ff:ad:2c:9f:b0:51:6a:cf:bc:de:a4:71:
         c4:c3:b8:d8:c0:da:7e:bf:cc:00:db:5d:70:f9:ce:38:fc:f8:
         36:05:8d:28:b6:d4:74:42:c3:30:48:9d:60:81:ac:ca:a8:9c:
         1a:ee:1a:cf:3f:ec:fc:88:b6:62:6d:7e:ab:1f:b7:0d:71:9a:
         c0:48:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----